Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/blKg7wJ9niT2GKE8Ai5eCrB4jfE.roa
File: blKg7wJ9niT2GKE8Ai5eCrB4jfE.roa (raw, json)
Hash identifier: 6A2bDcN2I3eYBOEMf/HeuEkp9GVCJNioQRbDNF9mxfc=
Subject key identifier: 6E:52:A0:EF:02:7D:9E:24:F6:18:A1:3C:02:2E:5E:0A:B0:78:8D:F1
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 011F
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/blKg7wJ9niT2GKE8Ai5eCrB4jfE.roa
Signing time: Thu 15 Sep 2022 02:41:51 +0000
ROA not before: Thu 15 Sep 2022 02:41:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 210707
IP address blocks: 2407:d1c0::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Sep 15 02:41:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6E52A0EF027D9E24F618A13C022E5E0AB0788DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:e8:93:ff:9c:9a:18:17:84:10:0a:bf:05:
d2:ad:3b:89:3d:68:79:28:fe:21:a9:62:b0:c7:f1:
00:56:58:cd:9e:1f:7d:95:e0:90:95:4f:79:d7:33:
36:cb:b6:ca:98:b2:4f:e4:09:8a:ca:5c:fd:e8:e6:
68:d2:04:eb:88:f0:d9:2c:89:b9:3e:5c:d6:73:88:
ca:36:e9:35:d5:7b:f4:65:aa:fc:2f:a7:f5:a9:c0:
9f:9e:e2:b6:c8:0b:12:b8:4c:ad:d7:f0:14:c9:8a:
42:c0:ba:b0:e1:e6:2f:16:35:e7:17:8e:83:8f:e6:
7f:c4:7a:15:11:c2:4e:e0:6f:2d:c4:54:01:71:7d:
aa:c2:32:0c:14:a3:52:cd:c2:e2:d1:8a:99:6b:f9:
26:52:94:ab:7a:02:b8:3e:76:2c:5e:7c:ee:98:c8:
da:45:82:64:1a:d5:3a:77:cf:6d:71:53:e8:ca:e6:
c8:9c:b8:b3:d5:ce:6c:ce:cd:79:00:6c:86:95:c0:
b9:80:f0:de:bd:b5:1c:c1:45:20:a9:bb:2a:f7:ea:
b5:1b:fc:0b:5f:5b:c0:a4:00:d7:ba:19:97:57:6c:
0c:1d:3d:53:3d:16:89:42:45:69:fa:9c:78:2a:40:
04:e1:54:98:cd:9b:86:39:3e:30:13:2f:3b:0a:f4:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:A0:EF:02:7D:9E:24:F6:18:A1:3C:02:2E:5E:0A:B0:78:8D:F1
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/blKg7wJ9niT2GKE8Ai5eCrB4jfE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
75:54:a7:5e:e9:d6:ef:d2:cc:6b:22:e1:e1:da:1f:ea:cb:4e:
a2:4d:68:ba:35:13:aa:ca:60:fa:83:60:ff:59:a0:86:31:c9:
5c:ac:31:1b:96:e0:37:ba:38:0f:47:ab:94:73:0f:95:d8:fd:
0a:98:57:23:ea:41:5c:02:32:55:f8:3a:69:48:c5:d1:33:8f:
e1:ad:dc:1a:6b:46:30:78:7a:e7:20:e7:11:2c:b8:9f:de:36:
aa:3e:2a:18:9d:98:18:63:ca:bf:9e:2d:4b:f4:23:ab:83:9b:
bc:58:41:c9:fd:57:af:a3:17:5b:6e:af:b8:75:56:71:24:f1:
64:7c:3d:2a:15:8e:76:93:8e:57:9f:8a:97:30:fb:49:b7:d7:
9b:e4:c2:2e:4d:7c:2c:08:f0:90:42:64:d8:dd:8e:ba:41:b5:
dc:ba:b8:b2:3b:c6:33:dc:b9:b9:64:d1:1d:63:80:e2:1a:b6:
25:06:76:78:71:bb:c4:80:3d:c1:9d:ea:96:10:2c:56:2a:7f:
29:7c:f6:fe:db:57:9d:4a:27:19:8c:8c:33:be:00:b3:b6:f3:
4e:c7:34:c9:e7:56:81:fc:50:2d:db:85:06:1f:be:d5:1f:cc:
2c:65:99:a1:16:e2:ab:c1:e7:ea:73:79:af:65:8c:bc:c8:31:
36:d3:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org